Analyse even php extension dependencies (ext-*) (#118)

Author: janedbal

.github/workflows/e2e.yml

@@ -119,6 +119,11 @@ jobs:
                 uses: shivammathur/setup-php@v2
                 with:
                     php-version: 8.3
+                    ini-file: development
+
+            -
+                name: List enabled extensions
+                run: php -m
 
             -
                 name: Install analyser dependencies
@@ -136,7 +141,12 @@ jobs:
                 working-directory: ${{ matrix.repo }}
                 run: composer install --no-progress --no-interaction --ignore-platform-reqs ${{ matrix.composerArgs }}
 
+            -
+                name: Run analyser (--disable-ext-analysis)
+                working-directory: ${{ matrix.repo }}
+                run: php ../../analyser/bin/composer-dependency-analyser --show-all-usages --disable-ext-analysis ${{ matrix.cdaArgs }}
+
             -
                 name: Run analyser
                 working-directory: ${{ matrix.repo }}
-                run: php ../../analyser/bin/composer-dependency-analyser ${{ matrix.cdaArgs }}
+                run: php ../../analyser/bin/composer-dependency-analyser --show-all-usages ${{ matrix.cdaArgs }}

README.md

@@ -49,7 +49,7 @@ Found unused dependencies!
 ```
 
 ## Detected issues:
-This tool reads your `composer.json` and scans all paths listed in `autoload` & `autoload-dev` sections while analysing:
+This tool reads your `composer.json` and scans all paths listed in `autoload` & `autoload-dev` sections while analysing you dependencies (both **packages and PHP extensions**).
 
 ### Shadowed dependencies
   - Those are dependencies of your dependencies, which are not listed in `composer.json`
@@ -84,6 +84,7 @@ This tool reads your `composer.json` and scans all paths listed in `autoload` &
 - `--verbose` to see more example classes & usages
 - `--show-all-usages` to see all usages
 - `--format` to use different output format, available are: `console` (default), `junit`
+- `--disable-ext-analysis` to disable php extensions analysis (e.g. `ext-xml`)
 - `--ignore-unknown-classes` to globally ignore unknown classes
 - `--ignore-unknown-functions` to globally ignore unknown functions
 - `--ignore-shadow-deps` to globally ignore shadow dependencies
@@ -128,6 +129,7 @@ return $config
     //// Adjust analysis
     ->enableAnalysisOfUnusedDevDependencies() // dev packages are often used only in CI, so this is not enabled by default
     ->disableReportingUnmatchedIgnores() // do not report ignores that never matched any error
+    ->disableExtensionsAnalysis() // do not analyse ext-* dependencies
 
     //// Use symbols from yaml/xml/neon files
     // - designed for DIC config files (see below)
@@ -166,8 +168,8 @@ Another approach for DIC-only usages is to scan the generated php file, but that
 NO_COLOR=1 vendor/bin/composer-dependency-analyser
 ```
 
-## Limitations:
-- Extension dependencies are not analysed (e.g. `ext-json`)
+## Recommendations:
+- For precise `ext-*` analysis, your enabled extensions of your php runtime should be superset of those used in the scanned project
 
 ## Contributing:
 - Check your code by `composer check`

composer-dependency-analyser.php

@@ -1,8 +1,14 @@
 <?php declare(strict_types = 1);
 
 use ShipMonk\ComposerDependencyAnalyser\Config\Configuration;
+use ShipMonk\ComposerDependencyAnalyser\Config\ErrorType;
 
 return (new Configuration())
     ->addPathToScan(__FILE__, true)
     ->addPathToScan(__DIR__ . '/bin', false)
-    ->addPathToExclude(__DIR__ . '/tests/data');
+    ->addPathToExclude(__DIR__ . '/tests/data')
+    ->ignoreErrorsOnExtensionsAndPaths(
+        ['ext-dom', 'ext-libxml'],
+        [__DIR__ . '/src/Result/JunitFormatter.php'], // optional usages guarded with extension_loaded()
+        [ErrorType::DEV_DEPENDENCY_IN_PROD]
+    );